Incident ShareFile Storage Zone Controller malware Progress Software privilege-escalation
Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns
CVE Tools coverage
Progress Software has advised ShareFile customers to immediately shut down their Storage Zone Controller servers following reports of a credible external security threat. The company temporarily restricted access to accounts using these controllers and is conducting an investigation. While no unauthorized access has been confirmed, speculation points to potential exploitation of two high-severity vulnerabilities—CVE-2026-2699 and CVE-2026-2701—which could allow unauthenticated remote code execution.